An MIT ID is a digital (or physical) credential enabling community members to authenticate themselves to card readers on and off campus.
Community members with an active MIT Kerberos account can use the MIT Atlas mobile application to enable their digital ID. If a physical ID card is required, the individual can use the MIT Atlas mobile app to print out a card at one of several self-service kiosks on campus.
LastPass is a password management system that removes the inconvenience of remembering all of your passwords and increases security.
IS&T provides access to Duo, a two-factor authentication application that leverages landlines and smartphones as an "Approve" or "Deny" system to identify users. Duo is a self-service web application for Touchstone-enabled web applications at MIT.
OpenID Connect (OIDC) is a RESTful authorization service that allows members of the MIT community to set authorization requirements for applications to access their RESTful Web APIs and Services at MIT. These requirements are based on OAuth2.0.
MIT onboarding processes automatically provision a Kerberos account for students, staff, faculty, and family members who reside on campus. Other individuals who need an MIT digital identity in order to access resources requiring authentication, but who are not active students, staff, or faculty, may be provided a sponsored guest account.
Your MIT Kerberos account (sometimes called an Athena/MIT/email account) is your online identity at MIT. Once you set up your account, you will be able to access your MIT email, educational technology discounts, your records, printing services, and much more.
When you register for an account on MIT's Athena system, you create your MIT Kerberos identity.
Passwords protect and limit access to your personal data and to IT resources at MIT.
If your password is over a year old, you will be required to change it when you renew your MIT certificate(s). Note: IS&T will never ask you to send or reset your password via email.
The Roles Database stores access rules (user authorizations) for applications like SAP, Data Warehouse, and the Graduate Admissions System, among others. Specially Authorized Departmental and Central Administrators use the web-based Roles Database application to view and manage user authorizations.
MIT Touchstone is a single sign-on web authentication service that allows members of the MIT community to log in to participating MIT and federated websites using their MIT credentials. When using a Touchstone-enabled application, your credentials will never be passed to the application service.
